Pi-Hole: https://pi-hole.net/
Especially interesting for on-premises Cloudrons

• Network-wide ad blocking via your own Linux hardware
• Block Over 100,000 Ad-serving Domains: Known ad-serving domains are pulled from third party sources and compiled into one list.
• Block Advertisements On Any Device: Network-level blocking you to block ads in non-traditional placed such as mobile apps and smart TVs, regardless of hardware or OS.
• Improve Overall Network Performance: Since ads are blocked before they are downloaded, your network will perform better.
• Reduce Cellular Data Usage: Pair your Pi-hole with a VPN for on-the-go ad-blocking and save on data costs.
• Monitor Performance And Statistics: The Web interface shows how many ads were blocked, a query log, and more.
• API: Utilize Pi-hole’s API in your scripting or programing projects.

Docker image: https://hub.docker.com/r/diginc/pi-hole/
Pi-Hole on Docker how-to: https://dxpetti.com/blog/2018/running-pi-hole-on-docker/ (part 1) and https://dxpetti.com/blog/2018/keeping-your-pi-hole-container-fresh-with-cron/ (part 2)

Homepage: https://github.com/zadam/trilium
Screenshots: https://github.com/zadam/trilium/wiki/Screenshot-tour
Docker server installation: https://github.com/zadam/trilium/wiki/Docker-server-installation

Features

• Notes can be arranged into arbitrarily deep tree. Single note can be placed into multiple places in the tree (see cloning)
• Rich WYSIWYG note editing including e.g. tables and images with markdown autoformat
• Support for editing notes with source code, including syntax highlighting
• Fast and easy navigation between notes, full text search and note hoisting
• Seamless note versioning
• Note attributes can be used for note organization, querying and advanced scripting
• Synchronization with self-hosted sync server
• Strong note encryption with per-note granularity
• Relation maps for visualizing notes and their relations
• Scripting - see Advanced showcases
• Scales well in both usability and performance upwards of 100 000 notes
• Touch optimized mobile frontend for smartphones and tablets
• Night theme
• Evernote and Markdown import & export

Builds

Trilium is provided as either desktop application (Linux, Windows, Mac) or web application hosted on your server (Linux).

• If you want to use Trilium on the desktop, download binary release for your platform from latest release, unzip the package and run trilium executable.
• If you want to install Trilium on server, follow this page.
  • Currently only recent Chrome and Firefox are supported (tested) browsers.

For those who want to use Syncthing on iOS (up- / download of files, manual syncing of folders):

As you know, there's no iOS client. Inspired by this Reddit thread, I successfully configured the free iOS Documents App to access the Synthing main pool. You can probably use any App that allows SFTP connections.

• Precondition: VPN Access from the iOS device to your Cloudron instance (in my case, since Cloudron sits on a server at home, I establish a VPN connection to my router - but it should work with the Cloudron OpenVPN App as well(?)
• Open Documents, add a new SFTP connection with the following parameters (see screenshot in German below)
  • Name: Anything you want (e.g. "Syncthing")
  • Host: local IP of your Clourdon, e.g. 192.168.1.27
  • Login: SSH username
  • Password: SSH password or use "Private Key" section - Documents allows to use a private SSH key
  • Encryption: left unchanged
  • Port: SSH Port (e.g. 202)
  • Login Path: the path to your Syncthing main pool, which should be /home/yellowtent/appsdata/[APP-ID]/data/folders; you'll find the APP-ID in the "Resources" tab of your Synthing config on Cloudron

Voilá, you should see all folders you manage in Syncthing. Documents allows to mark such folders for syncing, these are then accessible in the "Sync Folders" tab and can be synced manually any time. Upload and download of files from / to Syncthing works and such changes are reflected on all machines. Downloaded files can be opened / viewed / shared within the Documents App.

From: https://docs.rsshub.app/en/

RSSHub is a lightweight and extensible RSS feed aggregator, it's able to generate feeds from pretty much everything.

Perfect companion to TT-RSS, I think.

Examples: https://docs.rsshub.app/en/#application-updates and below

Manual Deployment: https://docs.rsshub.app/en/install/#manual-deployment
Docker Deployment: https://docs.rsshub.app/en/install/#docker-deployment

I managed to migrate from my current bitwarden instance (BW OLD) to the cloudron app (BW NEW) as follows:

1. Disable 2-Factor Authentification for BW OLD (this is important!). I also removed "Organizations" in Bitwarden, I don't know if that's important, too.
2. Open the terminal for BW OLD, go to app/data/
3. Zip your attachments: zip -r attachments.zip attachments/
4. Dump your existing sqlite database: sqlite3 db.sqlite3 .dump > sqlitedump.sql
5. Drop schema creation and metadata from your dump, leaving only your actual data: grep "INSERT INTO" sqlitedump.sql | grep -v "__diesel_schema_migrations" > mysqldump.sql
6. Still in the terminal view, hit the "Download" button (top right), enter the path to the attachments and the SQL dump (app/data/attachments.zip and app/data/mysqldump.sql) and download them.
7. Open the terminal for BW NEW, go to app/data/.
8. Still in the terminal view, hit the "Upload to /tmp" button (top right), upload the previously downloaded attachments.zip and mysqldump.sql
9. Move uploaded files to data folder: mv /tmp/attachments.zip /app/data/ and mv /tmp/mysqldump.sql /app/data/
10. Unzip your attachments: unzip attachments.zip and rm attachments.zip
    11.Import SQL Dump: mysql --user=${CLOUDRON_MYSQL_USERNAME} --password=${CLOUDRON_MYSQL_PASSWORD} --host=${CLOUDRON_MYSQL_HOST} ${CLOUDRON_MYSQL_DATABASE} < mysqldump.sql (Enter like that, don't replace the variables with your username or password)
11. Hit "Restart"

You can now login with your Bitwarden credentials. All passwords and the attachments shoud be there.

@will I think https://cloudron.io/documentation/custom-apps/tutorial/ and the following topics in that section is a good starting point...

@christiaan

Edit: actually it doesn't have an iOS client so that rules it out for us

That's the one thing I never really understand about many (open source) software projects:

Mobile clients need to have the highest priority, and even if there are mobile apps, often one ecosystem is excluded (either Android or iOS) even though their market share in the relevant target groups are equally significant.

It would be great if the Fulltext Search App could be included in the Nextcloud package. The app allows for fulltext search of files and bookmarks via Elasticsearch or Solr.

Homepage: https://apps.nextcloud.com/apps/fulltextsearch / https://github.com/nextcloud/fulltextsearch

Instructions: https://github.com/nextcloud/fulltextsearch/wiki

I‘m a lawyer working in the field of i.a. data privacy law who is just very interested in tech and likes to run things at home. Also, the rules of our profession require us to not give data of our clients to any third party which rules the use out most US based web services.

bitwarden_rs 1.1.4 is out
https://github.com/dani-garcia/bitwarden_rs

• Added support for running on subpath, simply add the subpath to the DOMAIN variable: DOMAIN=https://example.com/custom-path
• Attachment size limits, per-user and per-organization, set USER_ATTACHMENT_LIMIT or ORG_ATTACHMENT_LIMIT to a value in kilobytes to apply it.
• Updated U2F library which might solve some U2F certificate errors.
• Added SMTP test button in the admin page.
• Use web vault built by docker autobuild, using the hash to reference the image for extra security
• Now accepting y/n, True/False, 1/0 as config options that are booleans.
• Fixed error Unique constraint violation when using Two Factor and Postgres.
• Fixed error with can_signup_user that didn't allow to change the email address.
• Don't error if admin token is empty but disabled
• Now email domains are converted to punycode before sending
• Enable icons to be cached in the clients
• Added option to change invitation org name
• Enabled the sending of invitations from the admin panel, even when disabled
• Dependency updates

19.03 is out with the following changes:

• Fix possible leaking scope in Flow (server#22410)
• Combine body-login rules in theming and fix twofactor and guest styling on bright colors (server#22427)
• Show better quota warning for group folders and external storage (server#22442)
• Add php docs build script (server#22448)
• Fix clicks on actions menu of non opaque file rows in acceptance tests (server#22503)
• Fix writing BLOBs to postgres with recent contacts interaction (server#22515)
• Set the mount id before calling storage wrapper (server#22519)
• Fix S3 error handling (server#22521)
• Only disable zip64 if the size is known (server#22537)
• Change free space calculation (server#22553)
• Do not keep the part file if the forbidden exception has no retry set (server#22560)
• Fix app password updating out of bounds (server#22569)
• Use the correct root to determinate the webroot for the resource (server#22579)
• Upgrade icewind/smb to 3.2.7 (server#22581)
• Bump elliptic from 6.4.1 to 6.5.3 (notifications#732)
• Fixes regression that prevented you from toggling the encryption flag (privacy#489)
• Match any non-whitespace character in filesystem pattern (serverinfo#229)
• Catch StorageNotAvailable exceptions (text#1001)
• Harden read only check on public endpoints (text#1017)
• Harden check when using token from memcache (text#1020)
• Sessionid is an int (text#1029)
• Only overwrite Ctrl-f when text is focussed (text#990)
• Set the X-Requested-With header on dav requests (viewer#582)

@marcusquinn said in Syncthing on iOS:

Without trying, I wonder if my.server.com would work for the Host when working with a hosted VPS?

If your SSH server is reachable externally via a domain, that should work, too. My SSH sever is only reachable locally, that’s why I had to set it up this way.
Now if one could set up per-app-VPN easily in iOS, this could be really smooth, but one can’t.

For those who want to use Syncthing on iOS (up- / download of files, manual syncing of folders):

As you know, there's no iOS client. Inspired by this Reddit thread, I successfully configured the free iOS Documents App to access the Synthing main pool. You can probably use any App that allows SFTP connections.

• Precondition: VPN Access from the iOS device to your Cloudron instance (in my case, since Cloudron sits on a server at home, I establish a VPN connection to my router - but it should work with the Cloudron OpenVPN App as well(?)
• Open Documents, add a new SFTP connection with the following parameters (see screenshot in German below)
  • Name: Anything you want (e.g. "Syncthing")
  • Host: local IP of your Clourdon, e.g. 192.168.1.27
  • Login: SSH username
  • Password: SSH password or use "Private Key" section - Documents allows to use a private SSH key
  • Encryption: left unchanged
  • Port: SSH Port (e.g. 202)
  • Login Path: the path to your Syncthing main pool, which should be /home/yellowtent/appsdata/[APP-ID]/data/folders; you'll find the APP-ID in the "Resources" tab of your Synthing config on Cloudron

Voilá, you should see all folders you manage in Syncthing. Documents allows to mark such folders for syncing, these are then accessible in the "Sync Folders" tab and can be synced manually any time. Upload and download of files from / to Syncthing works and such changes are reflected on all machines. Downloaded files can be opened / viewed / shared within the Documents App.

The Cloudron app is on 1.7.1, Syncthing is on 1.9.0 currently though: https://github.com/syncthing/syncthing/releases/tag/v1.9.0

Please update as I think syncing is not working correctly at the moment when the server is at 1.7.1 and the clients (auto-updated) at 1.9.0: Syncthing changed the handling of case-sensitive file names and I have a lot of errors in my log regarding uppercase file names.... (https://docs.syncthing.net/advanced/folder-casesensitivefs)

@nebulon You're probably busy with the next Cloudron release but please don't forget this update There's quite a lot of important fixes.

Related to Sendgrid and why their IPs are identified as spam sources: https://krebsonsecurity.com/2020/08/sendgrid-under-siege-from-hacked-accounts/

https://nextcloud.com/changelog/#latest19

I reported it to Sendgrid, this was their answer:

When sending email through an account that is under the Free or Essentials pricing package, your account will be utilizing a shared IP pool. Being grouped with others in a pool of shared IP's can offer several benefits, especially if you are only sending a moderate amount of email.
Although there are benefits to sending on shared IP's, there are also risks which can sometimes produce unintended negative consequences. If some of these users display poor sending habits or behavior, it can negatively affect others (you) within the group.

Essentially, you need to be on a paid plan, otherwise you end up in spam lists. The thing is, no one tells you that. And you only find out that your mail was blocked when you login to the account and go to the "Blocked" subsite. In my case, I found out that a job application didn't go through 14 days ago. I get that they wanna sell you something but at least tell me about it. I learned the hard way, this is the end for me for self hosted mail. Imapsynced my Cloudron mail back to my old provider and that's that.

@girish Now I know why support didn't work out: Cloudron blocked my answer from my Cloudron mail account to you guys - as mail relay via Sendgrid - as spam.... (!)
FYI: the shown IP 167.89.12.138 does indeed belong to Sendgrid.

So mail relay via Sendgrid from the Cloudron mail server is not reliable, I guess....

@marcusquinn said in AdGuard - Network-wide ads & trackers blocking DNS server:

I currently use Ublock.org - seemed to be the best of the bunch when I researched and works pretty well but there's still a level of trust needed with that.

It's a long road moving things bit-by-bit to be self-hosted, even for a techie, but happy to keep moving in the direction.

Social logins, website javascripts and browser extensions are all effectively trojans really, so it's quite a challenge to completely decouple from the user data scrapers but certainly the right direction having watched what the alternatives have been up to over the years.

I would recommend the open uBlock Origin. From https://en.wikipedia.org/wiki/UBlock_Origin?wprov=sfti1:

The uBlock project official repository was transferred to Chris Aljoudi by original developer Raymond Hill in April 2015, due to frustration of dealing with requests. However Hill immediately self-forked it and continued the effort there. This version was later renamed uBlock Origin and it has been completely divorced from Aljoudi's uBlock. Aljoudi created ublock.org to host and promote uBlock and to request donations. In response, uBlock's founder Raymond Hill stated that "the donations sought by ublock.org are not benefiting any of those who contributed most to create uBlock Origin." The development of uBlock stopped in August 2015 and it has been sporadically updated since January 2017. In July 2018, uBlock.org was acquired by AdBlock and since February 2019 began allowing "Acceptable Ads", a program run by Adblock Plus that allows some ads which are deemed "acceptable", and for which the larger publishers pay a fee.